Privacy Policy

1. Data Controller

Elena Mochales Abogados
Registered Lawyer · ICAM Nº C69993
Madrid, Spain
Email: info@elenamochales.es

2. What Data We Collect

When you use our contact form, we collect:

  • Full name
  • Email address
  • Phone number (optional)
  • Any information you include in your message

Additionally, we may collect technical data such as IP address, browser type, and pages visited through cookies and analytics tools.

3. Purpose of Data Processing

Your personal data is collected and processed exclusively for:

  • Responding to your legal inquiries and consultation requests
  • Providing immigration law services as requested
  • Sending relevant legal updates if you have explicitly consented
  • Improving our website experience through analytics

4. Legal Basis for Processing

Processing is based on:

  • Your explicit consent when submitting our contact form (Art. 6.1.a GDPR)
  • Pre-contractual measures at your request (Art. 6.1.b GDPR)
  • Our legitimate interest in improving our services (Art. 6.1.f GDPR)

5. Data Retention

We retain your personal data only as long as necessary to fulfil the purposes described above, or as required by Spanish law (typically 5-6 years for legal matters). After this period, your data will be securely deleted.

6. Data Sharing

We do not sell, trade, or rent your personal data to third parties. Data may be shared only when:

  • Required by law or court order
  • Necessary to process your immigration application with Spanish authorities
  • With your explicit consent

7. Your Rights

Under the GDPR, you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate or incomplete data
  • Erasure: Request deletion of your data (“right to be forgotten”)
  • Restriction: Limit how we process your data
  • Portability: Receive your data in a structured format
  • Objection: Object to processing based on legitimate interests

To exercise any of these rights, email us at info@elenamochales.es. We will respond within 30 days.

8. Cookies

This website uses cookies to enhance your browsing experience. For detailed information, please see our Cookies Policy.

9. Data Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction, including SSL encryption, secure servers, and access controls.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page. Last updated: July 2026.

11. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) at www.aepd.es.